[Remote] Junior Application Security Engineer Internship

Note: The job is a remote job and is open to candidates in USA. EncryptEdge Labs is offering a Junior Application Security Engineer Internship Program that provides a hands-on learning experience focused on securing modern applications. Interns will engage in challenges covering application security areas, gaining practical expertise in identifying vulnerabilities and implementing secure development practices.ResponsibilitiesLearn and implement secure software development practicesConduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)Perform vulnerability assessments and penetration testing on web and mobile applicationsIdentify and mitigate OWASP Top 10 and CWE vulnerabilitiesCollaborate on securing APIs, databases, and cloud-based applicationsComplete a final capstone project to secure a mock application and present findingsWrite detailed security assessment reports, including remediation recommendationsSkillsA strong passion for application security, secure coding, and ethical hackingDetail-oriented mindset with the ability to analyze and identify vulnerabilities in web and software applicationsExceptional documentation and reporting skills, capable of clearly articulating findings and remediation stepsStrong communication and collaboration skills, especially when working with developers and security teamsConsistent commitment to meeting deadlines and maintaining a high standard of workUnderstanding of web technologies and architectures (HTML, CSS, JavaScript, APIs, databases)Basic familiarity with network protocols (HTTP/HTTPS, DNS, TCP/IP) and operating systems (Windows/Linux)Awareness of the OWASP Top 10 and common web vulnerabilitiesFoundational understanding of web application vulnerabilities such as SQL injection, XSS, CSRF, and insecure deserializationAbility to perform basic vulnerability scanning, manual testing, and input validation assessmentsUnderstanding of secure software development lifecycle (SDLC) and DevSecOps conceptsKnowledge of ethical and legal standards in web security testingAccess to a dedicated computer and a reliable internet connectionAbility to set up and maintain a secure testing environmentA degree in Computer Science, Software Engineering, or Information Security is preferred but not mandatoryDemonstrated self-learning through certifications, projects, or participation in bug bounty programs, CTFs, or online labsPractical exposure to web security labs, CTF challenges, or bug bounty platforms (e.g., HackTheBox, TryHackMe, PortSwigger Labs)Personal or academic projects demonstrating an understanding of application security or secure coding practicesExperience with tools such as Burp Suite, OWASP ZAP, and Nikto for web application testingExperience with Kali Linux, Nmap, and Metasploit (for reconnaissance and exploitation)Basic scripting ability in Python, JavaScript, or Bash for automation and testingBenefitsHands-on Experience: Gain practical knowledge and skills in network security, including traffic monitoring, intrusion detection, firewall configuration, and advanced cybersecurity practices.Professional Development: Receive guidance on career development and opportunities to build a portfolio through real-world challenges and presentations.Global Exposure: Participate in a global internship program, connecting with cybersecurity professionals from worldwide.Certificate of Completion: Earn a certificate of completion at the end of the internship, demonstrating your proficiency in network security engineering.Letter of Experience: Interns who successfully complete the program will also receive a letter of experience, outlining the skills and competencies developed during the internship.Letter of Recommendation: Outstanding interns will receive personalized letters of recommendation from EncryptEdge Labs.Remote Learning: Enjoy the flexibility of a remote internship that allows you to work from anywhere.Mentorship: Access support from experienced mentors and cybersecurity experts throughout the internship.Job Opportunities: Top-performing interns may be recommended for job placements through our network of partners and clients, helping you advance your career in network security.Company OverviewEncryptEdge Labs is a cutting-edge cybersecurity company dedicated to fostering talent and innovation in the field of cybersecurity. It was founded in 2023, and is headquartered in London, GB, with a workforce of 2-10 employees. Its website is https://www.encryptedgelabs.com.